I can’t speak with any authority on how the the process works or how exploitative it might be. The point I’m getting at is that I have basically zero experience with boxes of the lootish variety. (And there the boxes are free, but the keys to open them cost money.) I played the original Titanfall in online multiplayer, but I only spent a few evenings with it and I certainly never bought any microtransaction stuff. I played Team Fortress 2, but I was losing interest in the game just as the loot-based economy was taking off.
I played Counter-Strike, but that was in decades past, long before loot boxes. I haven’t played a lot of games that use loot boxes. They’re the equivalent to the MPAA in the realm of Hollywood films. Also remember that the ESRB is a non-government, non-profit, self-regulatory organization. We’re talking about “loot boxes” in the sense of in-game rewards, not “ loot crates“, the physical merch you can subscribe to. Last week the ESRB decided that Loot Boxes are not gambling.